Question

What are some best practices to manage access to AWS resources?

Answer 1

Following are some best practices to manage access to AWS resources.

1. Do not use root account - Your root account has access to all your AWS resources and services, hence it is a best practice to not share or use it.
2. Use Groups - Instead of giving access to AWS resources and services for individual users - create groups, give needed access to the groups, and add users to the groups - so that all users within a group has the same access.
3. Enable Multi-factor Authentication (MFA) - It is a best practice to enable MFA for privileged users such as admins. MFA adds an extra layer of protection on top of basic user-id and password based authentication.
4. Grant least privileges - Grant only the minimum required permissions for the user or group.